trivy-operator

Kubernetes-native security toolkit. Documentation Introduction The Trivy Operator leverages Trivy to continuously scan your Kubernetes cluster for security issues. The scans are summarised in security reports as Kubernetes Custom Resource Definitions, which become accessible through the Kubernete...

GHSA-8RVJ-MM4H-C258 vulnerabilities

Vulnerabilities for packages: athenz-csi-driver, cert-manager-istio-csr, mariadb-operator-fips, percona-xtradb-cluster-operator-fips, cert-manager-csi-driver-fips, step-issuer, gitlab-operator-fips, commercial-nginx-ingress, cert-manager-openshift-routes-fips, athenz-csi-driver-fips,...

Important: Red Hat Security Advisory: Red Hat OpenStack Services on OpenShift 18.0 (python-botocore) security update

An update for python-botocore is now available for Red Hat OpenStack Services on OpenShift 18.0 Antelope. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

cve-2020-14386

Reproducer for CVE-2020-14386 Pre-built container: registry.svc.ci.openshift.org/coreos/cve-2020-14386 You probably want to test against an explicit node, like this: apiVersion: v1 kind: Pod metadata: name: cve-2020-14386 spec: restartPolicy: Never nodeName: containers: - name: cve-2020-14386...

dockerevil

dockerevil A simple repository to store my security flaws in the docker technology 2016 - 2017 Docker API Privilege EscalationLPE/RPE Escalate from Offline Server/Minimal Images/Build from TAR Dockerfile Docker SUDO Privilege Escalation PoC Nmap Scripts 2019 CodeStudent1995 Based Exploit OpenShif...

CVE-2026-92092

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-92092

A flaw in openshift-ansible allows a remote attacker to achieve arbitrary code execution because the installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification . An attacker could perform a Man-in-the-Middle (MITM) attack or comprom...

CVE-2026-92092 Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-92092 Openshift-ansible: openshift-ansible: installer container downloads and executes remote inventory script without integrity verification

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

EUVD-2026-113354

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

CVE-2026-92092

A flaw was found in openshift-ansible. The installer container's "run" script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

Important: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update

Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update Red Hat OpenShift Data Foundation 4.19.26 security, enhancement & bug fix update FIXED BUGS: ========== DFBUGS-10836: Backport to odf-4.19.z Backport CephX keyType and rotation changes DFBUGS-10625: Backport to...

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.2

Logging for Red Hat OpenShift - 6.6.2 Red Hat OpenShift Logging 6.6.2 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

CVE-2026-92092

A flaw was found in openshift-ansible. The installer container's run script downloads and executes remote inventory and dynamic scripts without integrity verification. A remote attacker, by performing a Man-in-the-Middle MITM attack or compromising the HTTP server providing these scripts, could...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.4.4

Red Hat OpenShift Service Mesh 3.4.4 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.4....

Important: Red Hat Security Advisory: Logging for Red Hat OpenShift - 6.6.2

Logging for Red Hat OpenShift - 6.6.2 Red Hat OpenShift Logging 6.6.2 is a cluster-wide logging solution for OpenShift that collects and manages applications, infrastructure, and audit logs...

Critical: Red Hat Security Advisory: RHOAI 3.4.6 - Red Hat OpenShift AI

Updated images are now available for Red Hat OpenShift AI. Release of RHOAI 3.4.6 provides these changes:...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.3.9

Red Hat OpenShift Service Mesh 3.3.9 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh 3.3....

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.2.11

Red Hat OpenShift Service Mesh 3.2.11 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...

Important: Red Hat Security Advisory: Red Hat OpenShift Service Mesh 3.1.14

Red Hat OpenShift Service Mesh 3.1.14 This update has a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift Service Mesh...